Exposed Google API keys previously not considered secrets can now inadvertently grant attackers access to sensitive Gemini API endpoints.

After months of merchant frustration over securing the required API key for website-reported local inventory feeds via Google Tag Manager, Google has now confirmed a straightforward process: Why we ...